even in end to end onion there is possiblity with split traffic vs exit tor to clearnet site without ssl